se.swedenconnect.opensaml.xmlsec.config

Class ExtendedDefaultSecurityConfigurationBootstrap

java.lang.Object

org.opensaml.xmlsec.config.impl.DefaultSecurityConfigurationBootstrap

se.swedenconnect.opensaml.xmlsec.config.ExtendedDefaultSecurityConfigurationBootstrap

public class ExtendedDefaultSecurityConfigurationBootstrap
extends DefaultSecurityConfigurationBootstrap

Extends OpenSAML's DefaultSecurityConfigurationBootstrap with support for key agreement and key derivation algorithms.

Author:

Martin Lindström (martin@idsec.se), Stefan Santesson (stefan@idsec.se)

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	ExtendedDefaultSecurityConfigurationBootstrap() Constructor.

Method Summary

Modifier and Type	Method and Description
protected static EncryptedKeyResolver	buildBasicEncryptedKeyResolver() Build a basic instance of EncryptedKeyResolver.
static NamedKeyInfoGeneratorManager	buildBasicKeyInfoGeneratorManager() Build a basic NamedKeyInfoGeneratorManager.
static NamedKeyInfoGeneratorManager	buildBasicKeyInfoGeneratorManager(NamedKeyInfoGeneratorManager manager) Build a basic NamedKeyInfoGeneratorManager.
static BasicExtendedEncryptionConfiguration	buildDefaultEncryptionConfiguration() Build and return a default encryption configuration.
static BasicExtendedEncryptionConfiguration	buildDefaultEncryptionConfiguration(EncryptionConfiguration config) Builds an ExtendedEncryptionConfiguration object based on the supplied EncryptionConfiguration object.
static KeyAgreementKeyInfoGeneratorFactory	buildDefaultKeyAgreementKeyInfoGeneratorFactory() Creates a KeyAgreementKeyInfoGeneratorFactory with default settings.
static BasicSignatureSigningConfiguration	buildDefaultSignatureSigningConfiguration() Extends DefaultSecurityConfigurationBootstrap.buildDefaultSignatureSigningConfiguration() with http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1, http://www.w3.org/2007/05/xmldsig-more#sha384-rsa-MGF1 and http://www.w3.org/2007/05/xmldsig-more#sha512-rsa-MGF1.
static BasicSignatureSigningConfiguration	buildDefaultSignatureSigningConfiguration(SignatureSigningConfiguration config) Given a SignatureSigningConfiguration the method ensures that the signature algorithms http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1, http://www.w3.org/2007/05/xmldsig-more#sha384-rsa-MGF1 and http://www.w3.org/2007/05/xmldsig-more#sha512-rsa-MGF1 are among the signature algorithms and returns a BasicSignatureSigningConfiguration object.

Methods inherited from class org.opensaml.xmlsec.config.impl.DefaultSecurityConfigurationBootstrap

buildBasicInlineKeyInfoCredentialResolver, buildDataEncryptionKeyInfoGeneratorManager, buildDefaultDecryptionConfiguration, buildDefaultSignatureValidationConfiguration, buildKeyTransportEncryptionKeyInfoGeneratorManager, buildSignatureKeyInfoGeneratorManager

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ExtendedDefaultSecurityConfigurationBootstrap

protected ExtendedDefaultSecurityConfigurationBootstrap()

Constructor.

Method Detail

buildDefaultEncryptionConfiguration

@Nonnull
public static BasicExtendedEncryptionConfiguration buildDefaultEncryptionConfiguration()

Build and return a default encryption configuration.

Returns:

a new basic configuration with reasonable default values

buildDefaultEncryptionConfiguration

public static BasicExtendedEncryptionConfiguration buildDefaultEncryptionConfiguration(EncryptionConfiguration config)

Builds an ExtendedEncryptionConfiguration object based on the supplied EncryptionConfiguration object.

Parameters:

config - the config to start from

Returns:

an ExtendedEncryptionConfiguration object

buildDefaultSignatureSigningConfiguration

public static BasicSignatureSigningConfiguration buildDefaultSignatureSigningConfiguration()

Extends DefaultSecurityConfigurationBootstrap.buildDefaultSignatureSigningConfiguration() with http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1, http://www.w3.org/2007/05/xmldsig-more#sha384-rsa-MGF1 and http://www.w3.org/2007/05/xmldsig-more#sha512-rsa-MGF1.

Returns:

signature signing configuration

buildDefaultSignatureSigningConfiguration

public static BasicSignatureSigningConfiguration buildDefaultSignatureSigningConfiguration(SignatureSigningConfiguration config)

Given a SignatureSigningConfiguration the method ensures that the signature algorithms http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1, http://www.w3.org/2007/05/xmldsig-more#sha384-rsa-MGF1 and http://www.w3.org/2007/05/xmldsig-more#sha512-rsa-MGF1 are among the signature algorithms and returns a BasicSignatureSigningConfiguration object.

Parameters:

config - the configuration

Returns:

a signing configuration with RSA-PSS algorithms included

buildBasicEncryptedKeyResolver

protected static EncryptedKeyResolver buildBasicEncryptedKeyResolver()

Build a basic instance of EncryptedKeyResolver. Extends the one from DefaultSecurityConfigurationBootstrap with EncryptedElementTypeEncryptedKeyResolver.

Returns:

an EncryptedKey resolver instance

buildBasicKeyInfoGeneratorManager

public static NamedKeyInfoGeneratorManager buildBasicKeyInfoGeneratorManager()

Build a basic NamedKeyInfoGeneratorManager.

Returns:

a named KeyInfo generator manager instance

buildBasicKeyInfoGeneratorManager

public static NamedKeyInfoGeneratorManager buildBasicKeyInfoGeneratorManager(NamedKeyInfoGeneratorManager manager)

Build a basic NamedKeyInfoGeneratorManager.

Parameters:

manager - the manager to extend

Returns:

a named KeyInfo generator manager instance

buildDefaultKeyAgreementKeyInfoGeneratorFactory

public static KeyAgreementKeyInfoGeneratorFactory buildDefaultKeyAgreementKeyInfoGeneratorFactory()

Creates a KeyAgreementKeyInfoGeneratorFactory with default settings.

Returns:

a KeyAgreementKeyInfoGeneratorFactory instance